Randy Spence Email & Phone Number

Pittsburgh, Pa

Sept 2008 – PresentVendor Compliance and Risk Assessment to ensure 3rd party vendors that work with FedEx are in compliance with current ISO security standards.Standards include - Information Security Management BS ISO/IEC 17799:2000:2005, PCI Certification (Credit Card Language), all Level 1, 2, and 3 data certifications. Daily interaction with the Legal Dept. on all vendor contracts. Created Metrics to measure Vendor Compliance progress. Currently working on updating ISO\IEC Standards.IT SECURITY ENGINEER1998-Sept 2008Create and maintain Security policies as well as administeringsecurity on all PeopleSoft HRMS and FMIS databases. Current People Soft projects include: OPES, COE, E-Time, CDAS, GFO and all People Soft upgrades. Lead Security Analyst on all People Soft Projects. Developed Original COE Databasesand interacted with all Business areas on People Soft Projects. Played significant role in Relocating COE database from Pittsburgh PA. to Memphis TN.Creating company wide ids in following applications-NOVELL, NT, AS400, Active Directory, and Unix- (Unix ids through Tivoli and CA-Unicenter).I have been involved with the IDM initiative project based out of Memphis.Consistently monitoring use of SUPERUSER, SECURITY OFFICER, and general ids. Interaction with in-house Audit groups as well as outside Auditing Vendors.Some experience in Oracle (desktop DBA), along with AT&T Global Services. (WEB Administration).Completed 32 Classes through FedEx University.Received 3 Service Culture Excellence Awards, 31 Purple Promise Awards, 4 Service Champions Awards and 1 Continuous improvement Award.

Greater Pittsburgh Area

Vendor Risk ManagementCorporate ComplianceInformation SecurityRisk ManagementSOX, PCI, HIPAA Controls

AFFILIATED COMPUTER SERVICES. (ACS) (GENIX)1993-1998. Pittsburgh PA.Work with customers on policies and procedures for data securitystandards, (30 plus customers, systems). Interaction with managementas well as technical groups. Data administrator for CA-ACF2, IBM-RACF, andCA-TOP SECRET on MVS systems. CA-UNICENTER and BASE24 on Tandem.Currently training on AS400.1994-1995Ran batch schedules for 20 plus customers using UCC7, JOBTRAC, and ZEKE.Fixed as well as talked with technical groups on getting jobs restarted.Wrote procedures and trained employees on new systems.

LIMITED CREDIT SERVICES, COLUMBUS, OH 1989-1993Responsible for scheduling system down time betweenthree data centers for preventive maint. Performing employee performance reviews every six months. Interact with management andcustomer support on a daily basis. Created new AP checks templatefor the accounting dept.

E-SYSTEMS, GARLAND, TX1984-1989Data processing for this center consisted of maintaining a test and prodsystems for proposed and already existing government contracts.Data security for this company meant writing strict access rulesfor individual id’s and datasets. Responsible for uninterrupted operationof computer systems. An extensive background investigation was performed on me so I could work in a closed area. Held Department of Defense SecurityClearance.Various applications used currently and in the past,CDAS PeopleSoft V8.9 PROD,SUP,DEV,TRN. Perform system Maint. and SOX Maint.OPESOnline Payment Entry systemPeopleSoft V8.1 Perform system Maint. and SOX Maint.PeopleSoft V7.63FMIS-HRISPeopleSoft.EISEnterprise Infrastructure Services (reporting)GFOGround Force Online database for ContractorsPeopleSoft V8 web based.WSSO OBLIXTivoli (Identity Manager)E-DiscoverySearch Lotus notes and hard drives on various PC’s as directed by the Legal Dept.RACF, ACF2, TSO, Mainframe experience.

Dallas, Texas

Computer operations , OPD / SED program.

Data Center Operations And Programming Concepts, Data Center Operations/Programming Concepts.

Activities and Societies: Member DPMAGPA: 3.89

Computer Science

Activities and Societies: Computer Club Letterman Club22 College Credit Hours. Lost Football Scholarship (Physicially unable to play)..

High School